PAM-AGT-1002 trying to load the PAM Agent

Products

• CA Privileged Access Manager (PAM)

Issue/Introduction

I am getting "PAM-AGT-1002"  trying to load the PAM Agent. I have confirmed through the IP and DNS names and the PAM client connect to the same address on the same workstation.

Environment

Release : 3.4

Component :

Cause

This error code code be due to a DNS issue or a firewall issue blocking port 443 from the PAM Appliance but in this case we could see in this case there was an SSL handshake error in the <installfolder>Logs\CAPAMAgent.log. It appears the intermediate Certificate was not being read.

Resolution

Add the full chain into the local keystore. The agent does not share the system nor the PAM Client keystores.

Import the root certificate firsts followed by any intermediate certificates